| d7aeda5ed45ac7ca959f12180690caa371b5b14b |
|
08-Jul-2013 |
Pablo Neira Ayuso <pablo@netfilter.org> |
ip{6}tables-restore: fix breakage due to new locking approach
Since (93587a0 ip[6]tables: Add locking to prevent concurrent instances),
ip{6}tables-restore does not work anymore:
iptables-restore < x
Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
do_command{6}(...) is called from ip{6}tables-restore for every iptables
command contained in the rule-set file. Thus, hitting the lock error
after the second command.
Fix it by bypassing the locking in the ip{6}tables-restore path.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
/external/iptables/include/ip6tables.h
|
| 1639fe86579f86f5f6a954a9b0adde2e16ad1980 |
|
27-Aug-2011 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: combine common types: _handle
No real API/ABI change incurred, since the definition of the structs'
types is not visible anyhow.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| 7e5e866a36a76c153e5903b8251f90cfe07a1d34 |
|
27-Aug-2011 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: replace ipt_chainlabel by xt_chainlabel
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| 9680f2ecbdb7e5c61ab60e7399e9ca9f1013fd8d |
|
04-Apr-2011 |
Maciej Zenczykowski <maze@google.com> |
v6: rename print_rule() to print_rule6()
Signed-off-by: Maciej Zenczykowski <maze@google.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| 85aae15567b8ae1eaedf9f011ba7aef80dfca208 |
|
04-Apr-2011 |
Maciej Zenczykowski <maze@google.com> |
v6: rename delete_chain() to delete_chain6()
Signed-off-by: Maciej Zenczykowski <maze@google.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| 74ace0a46048d01611a44c24f6fe5f59d936231b |
|
04-Apr-2011 |
Maciej Zenczykowski <maze@google.com> |
v6: rename flush_entries() to flush_entries6()
Signed-off-by: Maciej Zenczykowski <maze@google.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| 241e73594f6d75e32a7e89ebdb6b7f7917a48df0 |
|
04-Apr-2011 |
Maciej Zenczykowski <maze@google.com> |
v6: rename for_each_chain() to for_each_chain6()
Signed-off-by: Maciej Zenczykowski <maze@google.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| 617d3d140f4739558dce2ef8ed01aef251cf5487 |
|
11-Feb-2009 |
Jamal Hadi Salim <hadi@cyberus.ca> |
libxtables: set names of programs
Set proper name of application.
Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
/external/iptables/include/ip6tables.h
|
| 47a6fd9ec9891a8040eb8fd6db3c5012c1056061 |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
src: consolidate duplicate code in iptables/internal.h
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| c31870f9bebb3d4d082016fcfaf8c2177ae32eb2 |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: move compat defines to xtables.c
Addendum to commit v1.4.3-rc1-41-g77f48c2 where the macro users
got moved.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| ea955480a8ae43aa956ac62e1aab3f9670529819 |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
src: remove unused ipt_tryload macro
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| 395e441e20ea9ab7f37122bcfd76fec527fa447b |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
src: remove iptables_rule_match indirection macro
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| c02e80878979d2205f3d89d05548397871e598e9 |
|
10-Feb-2009 |
Jan Engelhardt <jengelh@medozas.de> |
libxtables: decouple non-xtables parts from header
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
/external/iptables/include/ip6tables.h
|
| 1c9015b2cb483678f153121255e10ec0bbfde3e6 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove indirections
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| fd1873110f8e57be578df17fc9d03536b10f4f73 |
|
10-Nov-2008 |
Jan Engelhardt <jengelh@medozas.de> |
libiptc: remove typedef indirection
Don't you hate it when iptc_handle_t *x actually is a double-indirection
struct iptc_handle **? This also shows the broken constness model, since
"const iptc_handle_t x" = "iptc_handle_t const x" =
"struct iptc_handle *const x", which is like no const at all.
Lots of things to do then.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| ef18e8147903885708d1c264904129af4fb636d6 |
|
04-Aug-2008 |
Jan Engelhardt <jengelh@medozas.de> |
src: remove dependency on libiptc headers
xtables.h does not need really need libxtc.h, and we can drop it from
the install as it is internal-only.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
/external/iptables/include/ip6tables.h
|
| 96296cfb7e01298234c7fa9403619f50391620d1 |
|
13-May-2008 |
Henrik Nordstrom <henrik@henriknordstrom.net> |
iptables --list-rules command
Adds iptables --list-rules (-S) command, acting as a combination of
iptables --list and iptables-save.
The primary motivation behind this patch is to get iptables-save like
output capabilities in iptables-restore, allowing "iptables-restore -n"
to be used as a consistent API to iptables for all kind of operations,
not only blind updates..
As a bonus iptables also gets the capability of printing the rules
as-is.
This completely replaces the earlier patch which added the --rules
option.
Henrik Nordstrom <henrik@henriknordstrom.net>
/external/iptables/include/ip6tables.h
|
| 8b7c64d6ba156a99008fcd810cba874c73294333 |
|
15-Apr-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Remove old functions, constants
/external/iptables/include/ip6tables.h
|
| 21b41eea4724c57d2b6e5998cf38255046e43ad3 |
|
11-Feb-2008 |
Jan Engelhardt <jengelh@medozas.de> |
Combine IP{,6}T_LIB_DIR into XTABLES_LIBDIR
/external/iptables/include/ip6tables.h
|
| a3732db1280f790b8e26b41bdcbe8b5f92b7f51b |
|
24-Jul-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Moves all declarations in iptables_common.h to xtables.h.
/external/iptables/include/ip6tables.h
|
| 5cd1ff53a500256997519ec1d871750773c44803 |
|
24-Jul-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Moves IPPROTO_* and IP[6]T_LIB_DIR definitions to xtables.h
/external/iptables/include/ip6tables.h
|
| 04f8c54dc52e19096d31d94593bd1040716afe4d |
|
24-Jul-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Moves some duplicated functions in ip[6]tables.c to xtables.c
string_to_number_ll, string_to_number_l, string_to_number,
service_to_port, parse_port, parse_interface, are moved.
/external/iptables/include/ip6tables.h
|
| 0d502bcdbc97ed359e84f6a21dfa0049b3b60a6c |
|
24-Jul-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Introduces xtables match/target registration
- moves lib_dir to xtables.c
- introduces struct pfinfo which has protocol family dependent infomations.
- unifies load_ip[6]tables_ko() and moves them as load_xtables_ko()
- introduces xt_{match,match_rule,target,tryload} and replaces
ip[6]t_* with them
- unifies following functions and move them to xtables.c
- find_{match,find_target}
- compatible_revision, compatible_{match,target}_revision
- introduces xtables_register_{match,target} and make
register_{match,target}[6] call them. xtables_register_* register ONLY
matches/targets matched protocol family
Some concepts:
- source compatibility for libip[6]t_xxx.c with warning on compilation
not binary compatibility.
- binary compatibility between 2.4/2.6 kernel and iptables/ip6tables,
of cause.
- xtables is enough to support only one address family at runtime.
Then xtables keeps infomations of only the focused address famiy
in struct afinfo.
/external/iptables/include/ip6tables.h
|
| 0b82e8e81e887843011c8771f70d2302901f7e5e |
|
24-Jul-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Moves ip[6]tables_insmod() to xtables.c as xtables_insmod()
/external/iptables/include/ip6tables.h
|
| 29647c878ec485779b88a0c42f096ce028cabf15 |
|
20-Mar-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Fixes typos in the argument of ip[6]tables_insmod: quit -> quiet
/external/iptables/include/ip6tables.h
|
| 0e9480b864a16400fc3572719b05f01f300026ab |
|
13-Mar-2007 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
Supress error message from modprobe on checking revision.
/external/iptables/include/ip6tables.h
|
| 9561606bd938ed4b2614716a08a2856d4ef5e995 |
|
11-Jan-2007 |
Patrick McHardy <kaber@trash.net> |
Add UDPLITE multiport support
/external/iptables/include/ip6tables.h
|
| 740d72705d49373c4ee05b77b34aeb385854389e |
|
13-Nov-2006 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
load ip_[6]tables.ko just before checking revision support in kernel.
/external/iptables/include/ip6tables.h
|
| 4ebfad0cf7ff3e414a20c82513579789e8283c9f |
|
13-Nov-2006 |
Yasuyuki KOZAKAI <yasuyuki@netfilter.org> |
changes IP6T_SO_GET_REVISION_{MATCH,TARGET} to 68,69
66 and 67 is conflicted with IPv6 Advanced API in kernel <= 2.6.18.
/external/iptables/include/ip6tables.h
|
| 0665217784822434b1732cdc773d5daa12836438 |
|
20-Oct-2006 |
Rémi Denis-Courmont <rdenis@simphalempin.com> |
- Add revision support to ip6tables.
- Add support port range match to libip6t_multiport
(R?mi Denis-Courmont <rdenis@simphalempin.com>)
/external/iptables/include/ip6tables.h
|
| dbac8ad71c3c418fd8a62c08211885a38177b725 |
|
20-Jul-2006 |
Phil Oester <kernel@linuxace.com> |
reduce parse_*_port duplication (Phil Oester <kernel@linuxace.com>)
The below patch (dependent upon my 'reduce service_to_port duplication' patch)
centralizes the parse_*_port functions into parse_port.
/external/iptables/include/ip6tables.h
|
| 58179b1d0d1722ea16028aa2ea9d74afc86dd5dc |
|
20-Jul-2006 |
Phil Oester <kernel@linuxace.com> |
reduce service_to_port duplication (Phil Oester <kernel@linuxace.com>)
The service_to_port function is used in a number of places, and could
benefit from some centralization instead of being duplicated everywhere.
/external/iptables/include/ip6tables.h
|
| 2452bafd9810e8560717f10af8e26f8a3ac4f4cf |
|
28-Apr-2006 |
Patrick McHardy <kaber@trash.net> |
Add DCCP/SCTP support to multiport. Patch for kernel will go in 2.6.18.
/external/iptables/include/ip6tables.h
|
| a258ad7002ae4b4f366800f512db938fb78d0661 |
|
03-Mar-2006 |
Joszef Kadlecsik <kadlec@blackhole.kfki.hu> |
Multiple matches of the same type can be specified on the commandline.
If two or more matches of the same type are detected then the options
are assumed to be grouped in order to tell which option belongs
to which match:
... -m foo ... <options0> ... -m foo ... <options1> ...
Otherwise the commandline parsing is unmodified.
/external/iptables/include/ip6tables.h
|
| f5b86e698be2f1f96c974a4af176269f5c677596 |
|
22-Dec-2005 |
Jones Desougi <jones@ingate.com> |
Fix probing for supported revisions (Jones Desougi <jones@ingate.com>)
Bugzilla #413
/external/iptables/include/ip6tables.h
|
| 9867e814492275cabfbccd6b30375b0e23eb10cb |
|
22-Jun-2005 |
Yasuyuki KOZAKAI <yasuyuki.kozakai@toshiba.co.jp> |
reduce code replication of parse_interface() (Yasuyuki Kozakai)
/external/iptables/include/ip6tables.h
|
| 357d59dcfcbd125e2aa8c07b30cea9635efec2a7 |
|
27-Dec-2004 |
Martin Josefsson <gandalf@wlug.westbo.se> |
Fix setting lib_dir in ip*tables-{save,restore}
/external/iptables/include/ip6tables.h
|
| 69ac0e086c7b90e82cec369570ca363201023bde |
|
02-Feb-2004 |
Martin Josefsson <gandalf@wlug.westbo.se> |
Bloody copy-n-edit. Make sure to use matches in the order they are given...
/external/iptables/include/ip6tables.h
|
| a8658ca43fba82f7761f774f4daeb29b3e335053 |
|
05-Mar-2003 |
Harald Welte <laforge@gnumonks.org> |
port 'line number on error in iptables-restore' from ipv4
/external/iptables/include/ip6tables.h
|
| 3efb6ead2e51fe1eca55bcb2b06afb4dc4b8cb7c |
|
06-Aug-2001 |
Harald Welte <laforge@gnumonks.org> |
- added patch to support statically linking of iptables
- iptables-save/-restore is no longer experimental
/external/iptables/include/ip6tables.h
|
| 58918654563975e7bf3a6ec26af92a3bc222c229 |
|
16-Jun-2001 |
Harald Welte <laforge@gnumonks.org> |
Added support for iptables-restore module-load-on-demand (a. van schie)
/external/iptables/include/ip6tables.h
|
| 8a5eb6dd67e5fac875da51742d9a954c0ff5d92f |
|
05-May-2001 |
Fabrice MARIE <fabrice_marie_sec@yahoo.com> |
ip6tables fixes by Fabrice Maurie
/external/iptables/include/ip6tables.h
|
| 764316a133db8e5e2d1f2a9d941ffae993d7c9d9 |
|
26-Feb-2001 |
András Kis-Szabó <kisza@sch.bme.hu> |
ip6tables-save/-restore by Kis-Szabo Andras
/external/iptables/include/ip6tables.h
|
| b6db33196870d3ec401a7ca87234dd2bc379c413 |
|
27-Aug-2000 |
Jan Echternach <echter@informatik.uni-rostock.de> |
Jan Echternach's const tweak.
/external/iptables/include/ip6tables.h
|
| 8c700900e2a0cf87d7917cb62578583a60ad1210 |
|
15-May-2000 |
Philip Blundell <Philip.Blundell@pobox.com> |
Philip Blundell's IPv6 fixes.
/external/iptables/include/ip6tables.h
|
| 79dee0702b18c8ea1d1f7a2b1f6b29349466986b |
|
02-May-2000 |
Rusty Russell <rusty@linuxcare.com.au> |
IPv6 enhancements.
/external/iptables/include/ip6tables.h
|